Lexology November 12, 2024
On October 23-24, 2024, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) Information Technology Laboratory hosted the Safeguarding Health Information: Building Assurance through HIPAA Security conference. After a five-year absence, the conference has returned to Washington, D.C., at the HHS Headquarters.
Below are six important takeaways from the conference that covered entities and business associates regulated by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) need to pay attention to:
1. OCR’s New Initiative on Risk Analyses
OCR indicated that a major priority for the agency is ensuring that covered entities and business associates are performing thorough risk analyses.
Under the HIPAA Security Rule,...